Tenders Are Invited For Data Processing Services – Provision Of Services From An External Data Protection Officer

Data Processing Services – Provision Of Services From An External Data Protection Officer. 1 Tasks Of The Contractor In Particular, The Following Tasks Should Be Taken On By The Contractor: - Advice And Monitoring Of Compliance With Data Protection Regulations - Observation Of The Development Of Data Protection Law - Monitoring Of Data Processing And Data Protection Controls - List Of Processing Activities - Data Protection Impact Assessments - Advice On New Projects And Processing Activities - Contracts And Data Protection Agreements - Rights Of Those Affected - Data Protection Violations - Contact Persons For Employees And Contractual Partners - Cooperation With The Supervisory Authority - Documentation And Reporting - Raising Awareness And Training Of Employees - Specialist Knowledge And Further Training - Maintaining Data Protection Management - Optional: Taking On The Role Of Ai Representative 2 Availability And Response Time On Weekdays Between 9:00 A.M. And 5:00 P.M., Within 24 Hours Of Contact. Inquiries Are Processed Remotely Within Germany. In The Case Of Data Protection Incidents, A Response Time Of A Maximum Of 240 Minutes Is Required On Weekdays Within The Service Hours Of 9:00 A.M. To 5:00 P.M. The Response Must At Least Indicate That The Content Of The Request Has Been Noted. A Response Via An Automated And/Or Semi-Automated Standard Email That Simply Confirms Receipt Of The Request Is Not Sufficient. If The Data Protection Officer Appointed By The Contractor E.G. If, For Example, You Are Unable To Attend Due To Vacation Or Illness, Etc., A Representative Will Take Over The Tasks. The Representative Must Be Named At The Start Of The Service, Including Any Different Contact Details. 3 Requirements For The Qualifications Of The Personnel Employed - Valid Certification As Cipm And/Or As Cipp/E Or An Equivalent Certification (Equivalent Are Certifications Which Require A Minimum Cpe Certificate Over A Period Of 2-3 Years To Maintain Validity And Which Are Accredited According To The Ansi/Iso Standard) - Training As A Data Protection Officer And Regular (At Least Once A Year) Participation In Further Training On Data Protection Within The Last 4 Years - Working As A Data Protection Officer For At Least 5 Years Data Protection Officer - Willingness To Carry Out An Extended Security Check In Secret Protection (Ü2 Secret Protection). The Extended Security Check In Secret Protection (Sü2 Ghs) Is Necessary Due To The Cross-Departmental Work Of The External Data Protection Officer. As Part Of His Tasks, He Can Gain In-Depth Insights Into Various Areas Of The Client And Thereby Gain Comprehensive Knowledge Of Internal Processes And Sensitive Information. The Possibility Of Combining This Information Across Departments Creates An Increased Need For Protection. An Extended Ghs Security Check Is Therefore Necessary For The Person Deployed. Detail